Shibboleth Developers

["Scott Cantor" <>]

> All is fine except that the final redirect is a "302 moved" with
> a GET link, instead of the hoped for redirect form.

Final meaning the last step after login response to the SP?

> The SP is
> configured to preserve posted data, and does on other shib logins.
> Should the ECP method preserve posted data?

I'd have to check, but I think when we thought about it in the context of
the delegation work, one of the conclusions was that it might be a little
ugly to be generating Javascript-based form submission responses to a client
that supported ECP (and thus wasn't a browser).

I don't really remember what it's coded to do, but it seems as though it's
better for the client itself to deal with POST state when ECP is in the
picture.

-- Scott